Input validation

A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiSOAR 7.3.0 through 7.3.1 allows an authenticated, remote attacker to execute arbitrary code via a crafted payload...

CVE-2023-27995

Fortinet FortiSOAR is affected by CVE-2023-27995 due to improper neutralization of special elements used in a template engine. The vulnerability exists in FortiSOAR versions 7.3.0 through 7.3.1 and allows an authenticated, remote attacker to execute arbitrary code via a crafted payload in the tem...

CVE-2023-27995

A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiSOAR 7.3.0 through 7.3.1 allows an authenticated, remote attacker to execute arbitrary code via a crafted payload...

CVE-2023-27995

A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiSOAR 7.3.0 through 7.3.1 allows an authenticated, remote attacker to execute arbitrary code via a crafted payload...

FortiSOAR - Server-side Template Injection in playbook execution

An improper neutralization of special elements used in a template engine vulnerability CWE-1336 in FortiSOAR management interface may allow a remote and authenticated attacker to execute arbitrary code via a crafted payload...

PT-2023-6426 · Fortinet · Fortisoar

Name of the Vulnerable Software and Affected Versions: Fortinet FortiSOAR versions 7.3.0 through 7.3.1 Description: The issue is related to an improper neutralization of special elements used in a template engine, which allows an authenticated, remote attacker to execute arbitrary code via a...

Fortinet FortiSOAR 安全漏洞

Fortinet FortiSOAR is a Security Orchestration, Automation and Response SOAR solution from Fortinet, Inc. A security vulnerability exists in Fortinet FortiSOAR versions 7.3.0 through 7.3.1, which stems from improper neutralization of a specially crafted element used. An attacker could exploit the...

The vulnerability of the administration interface of the Fortinet FortiSOAR software for coordinating the operation of cybersecurity systems and for managing real-time incident responses allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the administration interface of the software for coordinating the operation of cybersecurity systems and for managing incident responses in real-time with Fortinet FortiSOAR is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker,...

Fortinet FortiSOAR Access Control Error Vulnerability (CNVD-2023-31171)

Fortinet FortiSOAR is a security orchestration, automation and response SOAR solution from Fortinet. Fortinet FortiSOAR suffers from an Access Control Error vulnerability that stems from improper access control in the program. An authenticated attacker could exploit this vulnerability to perform...

CVE-2023-25605

A improper access control vulnerability in Fortinet FortiSOAR 7.3.0 - 7.3.1 allows an attacker authenticated on the administrative interface to perform unauthorized actions via crafted HTTP requests...

CVE-2023-25605

A improper access control vulnerability in Fortinet FortiSOAR 7.3.0 - 7.3.1 allows an attacker authenticated on the administrative interface to perform unauthorized actions via crafted HTTP requests...

CVE-2023-25605

Summary: CVE-2023-25605 affects Fortinet FortiSOAR 7.3.0–7.3.1 and is due to an improper access control flaw in the administrative interface. An attacker authenticated to the admin interface can perform unauthorized actions by sending crafted HTTP requests. Multiple connected sources corroborate ...

CVE-2023-25605

A improper access control vulnerability in Fortinet FortiSOAR 7.3.0 - 7.3.1 allows an attacker authenticated on the administrative interface to perform unauthorized actions via crafted HTTP requests...

CVE-2023-25605

A improper access control vulnerability in Fortinet FortiSOAR 7.3.0 - 7.3.1 allows an attacker authenticated on the administrative interface to perform unauthorized actions via crafted HTTP requests...

FortiSOAR - Improper Authorization in request headers

An improper access control vulnerability CWE-284 in FortiSOAR's playbook component may allow an attacker authenticated on the administrative interface to perform unauthorized actions via crafted HTTP requests...

Fortinet FortiSOAR 安全漏洞

Fortinet FortiSOAR is a security orchestration, automation and response SOAR solution from Fortinet. Fortinet FortiSOAR suffers from an Access Control Error vulnerability that stems from improper access control in the program. An authenticated attacker could exploit this vulnerability to perform...

PT-2023-1863 · Fortinet · Fortisoar

Name of the Vulnerable Software and Affected Versions: Fortinet FortiSOAR versions 7.3.0 through 7.3.1 Description: The issue is related to improper access control in the administrative interface, allowing an attacker to perform unauthorized actions via crafted HTTP requests. This can enable a...

The vulnerability of the software for coordinating the operation of security systems and for managing real-time incident responses in Fortinet FortiSOAR is related to improper access control. This allows attackers to gain access to the API gateway.

The vulnerability of the software for coordinating the operation of security systems and for managing incident responses in real-time with Fortinet FortiSOAR is related to improper access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the...

Fortinet FortiSOAR Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in Fortinet FortiSOAR, a security orchestration, automation and response SOAR solution from Fortinet, Inc. input fields of various components within FortiSOAR to inject HTML tags...

CVE-2022-38379

Improper neutralization of input during web page generation CWE-79 in FortiSOAR 7.0.0 through 7.0.3 and 7.2.0 may allow an authenticated attacker to inject HTML tags via input fields of various components within FortiSOAR...